linux-kernel - [x86/kaslr] WARNING: at arch/x86/mm/ioremap.c:102 __ioremap

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Mon, 24 Jun 2013 22:23:17 +0800
From:	Fengguang Wu <fengguang.wu@...el.com>
To:	fengguang.wu@...el.com, Kees Cook <keescook@...omium.org>
Cc:	linux-kernel@...r.kernel.org
Subject: [x86/kaslr] WARNING: at arch/x86/mm/ioremap.c:102 __ioremap_caller()

Greetings,

I got the below dmesg and the first bad commit is

commit 57fa4af0635d30b2061377aab87094762fbc3373
Author: Kees Cook <keescook@...omium.org>
Date:   Tue Apr 23 17:18:38 2013 -0700

    x86: kaslr: select random base offset
    
    Select a random location when CONFIG_RANDOMIZE_BASE is used, bounded
    by CONFIG_RANDOMIZE_BASE_MAX_OFFSET. Sources of randomness currently
    include RDRAND, RDTSC, or the i8254.
    
    Signed-off-by: Kees Cook <keescook@...omium.org>
    ---
    v3:
     - fall back to reading the i8254 when no TSC, suggested by HPA.
    v2:
     - use rdtscl from msr.h, thanks to Mathias Krause.


[    1.274754] device id = 2670
[    1.275616] ------------[ cut here ]------------
[    1.276850] WARNING: at /c/kernel-tests/src/stable/arch/x86/mm/ioremap.c:102 __ioremap_caller+0x192/0x390()
[    1.279432] CPU: 0 PID: 1 Comm: swapper Not tainted 3.10.0-rc7-00012-g728c681 #3
[    1.281419]  0000000000000009 ffff88000003ddd8 ffffffff8a005f3d ffff88000003de18
[    1.283558]  ffffffff89087936 ffffffff8a63fad0 0000000000206000 00000000000095ff
[    1.285628]  0000000009400000 0000000000000010 0000000000009400 ffff88000003de28
[    1.287622] Call Trace:
[    1.288218]  [<ffffffff8a005f3d>] dump_stack+0x19/0x1b
[    1.289564]  [<ffffffff89087936>] warn_slowpath_common+0x66/0x90
[    1.291140]  [<ffffffff89087a25>] warn_slowpath_null+0x15/0x20
[    1.292659]  [<ffffffff8901ffb2>] __ioremap_caller+0x192/0x390
[    1.294209]  [<ffffffff8a7bfa49>] ? init_ts5500_map+0x17/0xc2
[    1.295775]  [<ffffffff8a7bf3df>] ? init_esb2rom+0x3a/0x67b
[    1.297277]  [<ffffffff8a7bfa32>] ? physmap_init+0x12/0x12
[    1.298632]  [<ffffffff89020202>] ioremap_nocache+0x12/0x20
[    1.300110]  [<ffffffff8a7bfa49>] init_ts5500_map+0x17/0xc2
[    1.304110]  [<ffffffff8a793f8c>] do_one_initcall+0x79/0x117
[    1.305680]  [<ffffffff8a79414f>] kernel_init_freeable+0x125/0x1af
[    1.307393]  [<ffffffff8a793775>] ? loglevel+0x31/0x31
[    1.308698]  [<ffffffff89ffab90>] ? rest_init+0x90/0x90
[    1.310038]  [<ffffffff89ffab99>] kernel_init+0x9/0xe0
[    1.311362]  [<ffffffff8a0147fa>] ret_from_fork+0x7a/0xb0
[    1.312612]  [<ffffffff89ffab90>] ? rest_init+0x90/0x90
[    1.313819] ---[ end trace 6bd4f422f0783100 ]---

git bisect start 728c681783a8e0b8a0dc5df440503c51bbaa9789 9e895ace5d82df8929b16f58e9f515f6d54ab82d --
git bisect  bad 76bf0e2ad9dacf346f861d13764ef4e3ed10e310  # 14:01     35-  x86: kaslr: report kernel offset on panic
git bisect good a6c21a0b3185bcc54996819157735398140a674f  # 14:27    187+  x86: kaslr: return location from decompress_kernel
git bisect  bad c1babe7ec300af293cf2716f037a935e6bb81a94  # 14:41     63-  x86: kaslr: select memory region from e820 maps
git bisect  bad 57fa4af0635d30b2061377aab87094762fbc3373  # 14:54     49-  x86: kaslr: select random base offset
git bisect good a6c21a0b3185bcc54996819157735398140a674f  # 16:30   1920+  x86: kaslr: return location from decompress_kernel
git bisect  bad 728c681783a8e0b8a0dc5df440503c51bbaa9789  # 16:30      0-  Merge remote-tracking branch 'kees/strncpy-strlen' into devel-hive-x86_64-201306231236
git bisect good 9e895ace5d82df8929b16f58e9f515f6d54ab82d  # 18:06   1920+  Linux 3.10-rc7
git bisect good e1a86578747376f08985627c84df088a5d0d1e92  # 21:27   1920+  Add linux-next specific files for 20130621

Thanks,
Fengguang

View attachment "dmesg-kvm-kbuild-52952-20130623130057-3.10.0-rc7-00012-g728c681-3" of type "text/plain" (43816 bytes)

Download attachment "bisect-728c681783a8e0b8a0dc5df440503c51bbaa9789-x86_64-randconfig-h005-0623-__ioremap_caller-5936.log" of type "application/octet-stream" (10704 bytes)

View attachment ".config-bisect" of type "text/plain" (95908 bytes)